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ABSTRACT 



In a previous paper, a tableau calculus has been presented, which constitute a decision procedure for 
hybrid logic with the converse and global modalities and a restricted use of the binder. This work extends 
such a calculus to multi-modal logic with transitive relations and relation inclusion assertions. 

The separate addition of either transitive relations or relation hierarchies to the considered decidable 
fragment of multi-modal hybrid logic can easily be shown to stay decidable, by resorting to results already 
proved in the literature. However, such results do not directly allow for concluding whether the logic 
including both features is still decidable. The existence of a terminating, sound and complete calculus 
for the considered logic proves that the addition of transitive relations and relation hierarchies to such 
an expressive decidable fragment of hybrid logic yields a decidable logic. 



2 Syntax and semantics of multi-modal hybrid logic with transitive relations and inclu- 
sion assertions 
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1 Introduction 



Hybrid languages are extensions of modal logic that allow for naming and accessing states of a structure 
explicitly. Their main distinguishing feature is represented by special atomic propositions, called nomi- 
nals, which give names to states: a nominal is true in exactly one state of the model. The two operators 
specific of hybrid languages are the satisfaction operator (@), allowing for jumping to a point named by 
a nominal, regardless of the accessibilities in the structure, and the binder (J,), allowing for binding state 
variables to states dynamically and for referring to these states later on. 

Other modal operators can be added to the basic hybrid language. Among them, this work considers 
the converse modalities (O - and and the global ones (E and A). Moreover, a hybrid language can 
rely on a multi-modal base, allowing for modelling structures with different accessibility relations. In 
this case, the basic modalities O and □ (and their converses, if present) are indexed by relation symbols. 
Hybrid multi-modal languages can also be enriched with a feature largely used in description logics, i.e. 
the possibility of declaring an accessibility relation to be transitive and/or included in another one. 

In this paper, basic hybrid logic (with nominals only, beyond the modal operators O and □) will be 
denoted by HL, and basic multi- modal hybrid logic by HL m . Logics extending HL or HL m with operators 
Ox, ■ ■ ■ , O n are denoted by HL(0i, . . . , O n ) and HL m (Oi, . . . , O n ), respectively. A multi-modal language 
including transitivity assertions and/or relation hierarchies will be denoted in the same way, just including 
Trans (for transitivity) and/or C (for relation inclusion) among Oi, . . . , O n . 

The satisfiability problem for formulae of any hybrid logic HL(Oi, . . . , O n ) or HL m (Oi, . . . , O n ) - 
where the operators are among those considered above - is decidable, provided that the binder is not 
among Ox, ■ ■ ■ , O n . Unfortunately, due to its high expressive power, the addition of the binder causes a 
loss of decidability (even in the absence of nominals) [TJ [3] . 

However, there are both syntactic and semantic restrictions allowing for regaining decidability of hy- 
brid logic with the binder. In [22J it is proved that the satisfiability problem for formulae in HL(@, J,, E, O - ) 
is decidable, provided that their negation normal form contains no universal operator (i.e. cither □ or 
or A) scoping over a binder, that in turn has scope over a universal operator. Such a fragment of hybrid 
logic is denoted by HL(@,J,, E, O - ) \ D^n. Another way of restoring decidability for hybrid logic with 
binders is by restricting the frame class: for instance, decidability of HL(@, \., E, O - ) can be recovered 
by restricting the frame class to frames of bounded width (i.e. frames where the number of successors 
of each state is bounded) [22]. Moreover, HL(^) on transitive frames, transitive trees, linear orders or 
equivalence relations is decidable [TT] [TO] [20] [T7] . 

On the other hand, adding either the satisfaction operator or the converse modalities to the binder 
leads to undecidability over transitive frames [2D], and satisfiability becomes undecidable also for the 
multi-modal version of the hybrid language: HL m (|) is undecidable over a wide range of frame classes, 
among which the classes of frames mentioned above [18] . 

This work considers the fragment of hybrid logic HL m (@, J,, E, O - , Trans, Z ) \ i.e. hybrid logic 

with the converse and global modalities, transitive relations, relation hierarchies and restricted uses of 
the binder. The results quickly reported above do not allow for concluding whether such an extension of 
HL(@,4-, E, O - ) \ 0\.0 is decidable. Nor can the question be answered by the reduction argument used 
in [22] to prove that HL(@,4,, E, O - ) \ is decidable. The proof in that work shows that there exists 
a satisfiability preserving translation of formulae in HL(@,4,, E, O - ) \ □J.D into HL(@,J,, E, O - ) \ \n, i.e. 
the set of formulae in negation normal form where no universal operator occurs in the scope of a binder. 
The standard translation of hybrid logic into first order classical logic [T] 122) maps, in turn, formulae in 
HL(@,J,, E, O - ) \]£1 into universally guarded formulae, that have a decidable satisfiability problem [T2] . 
Since also the translation of a relation inclusion axiom is a guarded formula, HL r „(@, 4-, E, O - , Z ) \ D],D 
is decidable. But transitivity axioms make the guarded fragment (GF) of first order logic undecidable 
H2J. 

On the other side, if transitive relations only occur in guards, GF is decidable [2T], therefore HL m (@, 
4_, E,0~, Trans) \ O^D is decidable. But the translation of relation inclusion axioms may have transitive 
relations outside guards. Therefore, in the presence of both transitive relations and relation hierarchies, 
the decidability question is unsettled. 

This work constitutes a prosecution of previous works, where terminating tableau calculi for decidable 
fragments of Hybrid Logic with the binder have been defined [5] [5]. In particular, in [pj, a tableau calculus 
has been presented, which constitutes a satisfiability decision procedure for HL(@,J,, E, O - ) \ D^Z. Such 
a procedure is here extended to multi-modal hybrid logic HL m (@, I, E, C>~, Trans, Z) \ Z|Z: a tableau 
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calculus extending that given in [9] is defined, which terminates and is sound and complete for formulae in 
the fragment HL m (@, J., E, O - , Trans, Z ) \^Z, i.e. formulae in negation normal form where no occurrence 
of a universal operator is in the scope of a binder, with the addition of transitivity assertions and relation 
hierarchies. A satisfiability preserving translation of formulae, similar to that defined in |22j . turns the 
calculus into a satisfiability decision procedure for the fragment HL m (@, |, E, O - , Trans, C ) \ □J.D. 

Soundness, completeness and termination of the tableaux calculus thus imply that the satisfiability 
problem for the fragment of multi-modal hybrid logic HL m (@, J., E, 0~, Trans, Z ) \ is dccidable. 

The language HL m (@,4_, E, O - , Trans, Z) \ allows for representing some interesting frame prop- 
erties. For instance, assuming that a transitivity assertion has the form Trans(i?), where R is a relation 
symbol, and inclusion assertions may have either form S QR (S is a sub-relation of R) or S~ Z R (the 
inverse of S is a sub-relation of i?), the following properties can be represented: 

Transitivity: Trans(i?) 

Symmetry: R~ Z R 

Reflexivity: A^x.Orx 

At most n states: E^i. . . . EJ,x n .A(xi V • • • V x n ) 

At least one i?-sibling: Alx.O^Op^x 

At least n i?-successors: Alx.Oiyi.(x : On(^yi A iy2-{x : Or^Vi A —17/2 A iy3 )))) 

Therefore satisfiability in HL m (@,J,, E, O - ) \ D^Zl is decidable over frames enjoying any combination of 
the above properties. 

The tableau calculus is presented in Section[3] Section|3]proposes a variant of the set of expansion rules 
specific to treat transitive relations and relation inclusion assertions, that is closer to the corresponding 
one proposed, for instance, in [131 1141 1151 I16j . Section [5] shows how to extend the termination and 
completeness proofs of [§] to the extended calculus and Section H2 concludes this work. 

2 Syntax and semantics of multi-modal hybrid logic with tran- 
sitive relations and inclusion assertions 

Well-formed expressions of HL m (@,J,, E, O - , Trans, Z) arc partitioned into two categories: formulae (for 
which the metasymbols F,G,H - possibly with subscripts - will be used) and assertions (that will be 
denoted by A, B,C). 

Formulae are built out of a set PROP of prepositional letters, a set NOM of nominals, an infinite set 
VAR of state variables, and a set REL of relation symbols (all such sets being mutually disjoint), and 
defined by the following grammar: 

F := p\a\x\^F\FAF\FVF\ O r F | n R F 
I O r F I D R F I EF I AF I a:F | x:F | \,x.F 

where p G PROP, a G NOM, x G VAR and R G REL. In this work, the notation t: F is used (for 
t G NOM U VAR) rather than @tF. We use metavariables a, b, c, d for nominals, while x, y, z are used for 
state variables and R,S,P for relation symbols (every metavariable possibly decorated by a subscript). 

If F is a formula, x a state variable and a a nominal, then F[a/x] denotes the formula obtained from 
F by replacing a for every free occurrence of x (an occurrence of x is free if it is not in the scope of a 
-Ix). If ao, ■ ■ ■ , a n , 60, ■•■ , b n are nominals, then F[bo/ao, . . . , b n /a n ] denotes the formula obtained from F 
by simultaneously replacing bi for every occurrence of a,; . 

Assertions are either transitivity assertions, of the form Trans(i?), for R £ REL, or inclusion assertions, 
of either form R C S or R~ Z S, for R, S G REL. Here, R~ is intended to denote the inverse of the relation 
denoted by i?, i.e. the set of pairs of states (w, w') such that (w' , w) is in the relation denoted by R. 

Note that inverse relations are allowed only on the left of the Z symbol. This is only a syntactical 
restriction, since R~ Z S~ is equivalent to R Z S, and R Z S~ is equivalent to R~ Z S. 

An interpretation M. of an HL m (@, 4., E, 0~, Trans, Z) language is a tuple (W, p, N, I) where W is 
a non-empty set (whose elements are the states of the interpretation), p is a function mapping every 
R G REL to a binary relation on W (p{R) C W x W), N is a function NOM — > W and / a function 
W —> 2 PR0P . We shall write wRw' as a shorthand for {w 7 w') G p{R), and wR~w' for {w\w) G p{R)- 

If M. = (W, p, N, I) is an interpretation, w G W, a is a variable assignment for M. (i.e. a function 
VAR — > W) and F is a formula, the relation M. Wl a \= F is defined adding the following clauses to the 
usual definition of the classical operators: 



4 



1. M w ,a \= p if p G Z(m), for p G PROP. 

2. M m ff |= a if iV(a) = tu, for a G NOM. 

3. Ai^, cr |= x if cr(x) = w, for X G VAR. 

4. M^ct h if M N[a)l a (= F, for a G NOM. 

5. M w ,cr |= a;:FifM ffW ,(T |= F, for a; G VAR. 

6. M w ,a \= Ix.F if M w ,cr^ |= F, where a™ is the variable assignment such that o™{x) = w and, for 

y¥=%, Vxiv) = a (y)- 

7. A4 w ,a \= O r F if for every w' such that wRw', Ai W ',a \= F. 

8. M. w , cr |= OrF if there exists u/ such that wRw' and Af^', cr (= F. 

9. Ai^, cr |= n^F if for every «/ such that w'Rw, A4 W >, a \= F. 

10. A^uj, cr |= O^F if there exists «/ such that w'Rw and AO, er |= F. 

11. A( w ,cr |= AF if M w >,a (= F for all w' G W. 

12. cr (= EF if M w >,a \= F for some w' G W. 

A formula F is satisfiable if there exist an interpretation Af, a variable assignment cr for M. and a state 
w of Af, such that A^ m , cr |= F. Two formulae F and G are logically equivalent (F = G) when, for every 
interpretation Ad, assignment cr and state w of Af, AI„,, cr |= F if and only if A4 W , a \= G. A formula F 
holds in a state u; of a model Ai (Ai w (= F) iff Ai w , a \= F for every variable assignment cr. 

Every formula in HL m (@, J,, E, O - ) is logically equivalent to a formula in negation normal form (NNF), 
where negation appears only in front of atoms. Therefore, considering only formulae in NNF does not 
restrict the expressive power of the language. 

If A is a set of assertions, an interpretation Ai = (W, p,Af,T) is a model of A if: 

1. for all R G REL such that Trans(i?) G A, and for all states wq, Wi, u>2 G W, if woRwi and w±Rw2, 
then wqRw2', 

2. for all R,S e REL, if R C S G A then p(i?) C p(S'). 

3. for all R,Se REL and all w, w' G W, if i?~ E 5 G A and wiJio', then w'Sw. 

Finally, if F is a formula and .4 a set of assertions, {F} U A is satisfiable if there exists a model A4 
of A and a state u; of Al such that A"!™ (= F. 

3 The tableau calculus 

This section shows how to extend the system described in [9] to the presence of transitivity and inclusion 
assertions. The expansion rules that will be introduced to treat assertions are similar to the analogous 
rules presented by [T31 HH LTS1 US] (see Section |4TT|) . However, their addition to a terminating calculus 
dealing also with (restricted occurrences of) the binder is a novelty. 

The presentation will be as self contained as possible, therefore it overlaps with the description given 
in [9] in many points. However, since some of the basic notions underlying the calculus arc quite involved, 
they are not given a completely formal account. We refer to [9] for a more detailed view of the original 
calculus, while here focusing on the novelties (w.r.t. the system described in [5]) due to the addition of 
assertions. 
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R\ZR 



Rein 



R^S S^P 
R\ZP 

R~QS £T_£P 
R\ZP 



Reli 



Rel 3 



R-QS SEP 
R-QP 

RtZS S~Q P 
R'HP 



Rel 2 



Rel 4 



Table 1: Assertion rules 

3.1 The expansion rules 

A tableau is a set of branches, and a tableau branch is a sequence of nodes no, n\, ■ ■ ■ , where each node is 
labelled cither by an assertion or a ground satisfaction statement, i.e. a formula of the form a: F, where 
no state variable occurs free in F. Node labels are always formulae in NNF. 

If n occurs before m in a branch, we write n < m. The label of the node n is denoted by label(n). 
The notation (n) a: F is used to denote the node n, and simultaneously say that its label is a: F. If a 
node (n) a : F is in a branch, then the nominal a is said to label the formula F in the branch. 

Let F be a ground hybrid formula in NNF and A a set of assertions. A tableau for {F} U A is 
initialized with a single branch, constituted by the node (no) ao: F, where ao is a new nominal, followed 
by nodes labelled by the assertions in A and then expanded according to the rules of Table [1] Such rules 
complete the subrelation assertions in A by the reflexive and transitive closure of C . The formula ao : F 
is the initial formula of the tableau. 



(n) a: (F A G) 

(m ) a: F 
(mi) a: G 



(A) 



(n)a:b:F 



(@) 



(m) b:F 
(n)a:D R F (m)a:0 R b 



(k) b:F 
(n)a:0 R F 



(□) 



(O) 



(mo) a: R b 
(mi)b:F 
where & is a fresh nominal 
(not applicable if F is a nominal) 



a: AF 



(A) 



b:F 

where b occurs in the branch 



[B] 
(n) a: b 

B[b/a] 



(n) a: (F V G) 



(mo) a: F (mi)a:G 

(n)a:jx.F 
{m)a:F[a/x] W 

(n) a: O^F (m) b: <> R a 
(jfc) 6: F 

(n) a: O'F 



(V) 



(□") 



(o- 



(mo) b: R a 
(mi)fe:F 
where 6 is a fresh nominal 



a: EF 



(E) 



b:F 

where b is a fresh nominal 



(=) 



Table 2: Expansion rules: first group 

A tableau is expanded by application of the rules in Tables [5] and El which are applied to a given 
branch. Most rules are standard, and their reading is standard too. The equality rule (=) does not add 
any node to the branch, but modifies the labels of its nodes. The schematic formulation of this rule in 
Table [2] indicates that it can be fired whenever a branch B contains a nominal equality of the form a: b 



G 



(with a ^ b); as a result of the application of the rule, every node label F in B is replaced by F[b/a]. 

The rules of Tableware the same as those presented in [5], but for the fact that the modal rules (□, 
□~, O and O - ) are here reformulated to address the multi-modal case. 

The rules □, □ " and A arc called universal rules. When the A rule is applied producing a node 
labelled by a formula of the form b : F , it is said to focus on b (and b is the focused nominal of the 
inference). The O, 0~ and E rules are called blockable rules, formulae of the form w.OrF, where F is 
not a nominal, a: O^F, and a: EF are blockable formulae and a node labelled by a blockable formula is a 
blockable node. 

Sometimes, the rules Linki and Linl<2 of Table [3] will be generically called the Link rules, and anal- 
ogously, the Transi, Trans2, Transf and Trans^ rules arc called the Trans rules. The four Trans rules 
of Tabic [3] deal with transitive relations and can be seen as reformulations (in the presence of inclusion 
assertions) of the □ rule for transitive modal logics (particular cases of such rules arc when R = S). The 
two Link rules deal with inclusion assertions. 



(n)a:0 R b (i) R C 5* . . (n) aO R b (i) R~ C S . , 
— (Linki) — (Linka) 

(m)a:<>sb (m)b:<>sa 

(n)a-.a s F (m)a:0 R b (t)Jrans(R) (i)R\ZS , 

(Transi) 

(Trans^) 

(Trans 2 ) 





(k) b:D R F 




(n) a:O s F 


(m)b:0 R a (t)Trans(Ti) 


(i)RCS 




(k) b:D R F 




(n) a: OsF 


(m)b:0 R a (t)Trans(R) 


{i)R-^S 




(k) b:D R F 




(n) a: a^F 


(m)a:0 R b (i)Trans(i?) 


(i)R-ns 


(k) b: a R F 



(Trar 



Tabic 3: Expansion rules: second group 

The premiss n of either the □, or one of the Trans rules is called the major premiss, and m is the 
minor premiss of the rule. In an application of a Link rule, n is the logical premiss. The premisses i and 
t, in all rules of Table [3J are the side premisses of the rules. 

The first node of a branch B is called the top node and its label the top formula of B. Nominals 
occurring in the top formula are called top nominals. The notion of top nominal is relative to a tableau 
branch, because applications of the equality rule may change the top formula, hence the set of top 
nominals. 

A branch is closed whenever it contains, for some nominal a, either a pair of nodes (ro) a:p, (m) a: ->p 
for some p € PROP, or a node (n) a: ->a. As usual, we assume that a closed branch is never expanded 
further on. A branch which is not closed is open. A branch is complete when it cannot be further 
expanded. 

3.2 Blocking and other restrictions on rule application 

Termination is achieved by means of a loop-checking mechanism using nominal renaming. Substan- 
tially, in order for a node (n) F to (directly) block (m) G in a branch B, it must be the case that 
G = F[ai/b\, . . . , a n /b n ], where oi, . . . , a n , b\ . . . , b n are non-top nominals such that, for all i = 1, . . . ,n, 
ai and bi label the same set of propositions in PROP and the same formulae of the form U R F and O^F. 
More precisely: 

Definition 1 (Nominal compatibility and mappings). If B is a tableau branch, then: 

1. two nominals a and b are compatible in B if they label the same propositions in PROP and the same 
formulae of the form V rF ', for V £ {□, D - }. 
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2. A mapping n for B is an injective function from non-top nominals to non-top nominals such that 
for all a, a and 7r(a) are compatible in B. 

3. Mappings are extended to act on formulas in the obvious way: if tt is a mapping and F a formula, 
tt(F) is the formula obtained by substituting 7r(a) for a in F, for every nominal a. A mapping tt 
for B maps a formula F to a formula G if: 

(a) ir(F) = G; 

(b) tt is the identity for all nominals which do not occur in F. 

4- A formula F can be mapped to a formula G in B if there exists a mapping tt for B mapping F to 
G. 

The application of the blockable rules is restricted by blocking conditions: a direct blocking condition, 
which forbids the application of a blockable rule to a node n, whenever the label of a previous node can 
be mapped to label(n); and also an indirect blocking condition. 

Indirect blocking relies on a partial order -<g, called the offspring relation, on the nodes of the branch 
B, which arranges them into a family of trees, where non-terminal nodes are blockable nodes. Every tree 
is rooted at a node called a root node (a node with no parents w.r.t. the offspring relation). When a 
blockable rule is applied, the generated nodes are children (w.r.t. the offspring relation) of the expanded 
node. All the other rules generate siblings of one of the premisses of the inference (two nodes are siblings 
either if they are both root nodes or they have the same parent). 

Properly, the offspring relation and blockings are defined by a mutual recursion on branch construction: 
if B' is a branch obtained by expanding B, the definition of -<g/ assumes that the set of blocked nodes 
in B is already defined, and indirectly blocked nodes in B depend on the relation ~<&. This is due to the 
presence of the A rule, for which a minor premiss must be defined, since nodes added to a branch B by 
an application I of the A rule are siblings of such a minor premiss (in the new branch B' obtained from 
the expansion); but, in order to determine the minor premiss of I it is necessary to know which nodes 
are blocked in B. 

The presentation that follows is somewhat simplified, and the reader is referred to [3] for the more 
formal approach. Let us assume that when the A rule is applied, beyond the premiss shown in Table 
the branch contains a node called the minor premiss of the rule application (which will be defined further 
on, in Definition [S]) . 

Definition 2 (Offspring relation). Let B be a tableau branch. 

1. Every node already contained in the initial branch from which B is obtained (i.e. its top node and 
all the nodes labelled by assertions) is a root node. 

2. If a node n has been added to B by application of a blockable rule to node m, then m n (n is a 
child of m and m is the parent of n). 

3. If n has been added to B by application of either a universal rule or one of the Trans rules, whose 
minor premiss is m, then n is a sibling of m (i.e., if m is a root node, then n is a root node too; 
otherwise, if k -<e m , then k -<g n). 

4- If n has been added to B by application of any other rule of table® (i.e. any other single- premiss 
rule) to node m, then n is a sibling of m. 

5. If n has been added to B by application of one of the Link rules, then n is a sibling of the logical 
premiss of the inference. 

The notions of direct and indirect blocking can now be defined. 

Definition 3 (Direct and indirect blocking) . Let B be a tableau branch. The set of directly and indirectly 
blocked nodes in B is defined by induction on the (total) order < on the nodes of B: 

• n is blocked if it is either directly or indirectly blocked. 

• n is directly blocked by m if n is a blockable node, m < n, m is not blocked and label(m) can be 
mapped to label(n) in B; n is directly blocked in B if it is directly blocked by some m in B. 
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• n is indirectly blocked if it is not directly blocked and it has an ancestor w.r.t. -<g which is blocked. 

An indirectly blocked node is called a phantom node (or, simply, a phantom). 

The application of the expansion rules is restricted by the conditions defined next. Restrictions Rl- 
R4 are the same as those formulated in 9 The restrictions concerning the new rules are formulated 
apart (R5-R6). 

Definition 4 (Restrictions on the expansion rules). The expansion of a tableau branch B is subject to 
the following restrictions: 

Rl. no node labelled by a formula already occurring in B as the label of a non- phantom node is ever 



R2. A node n labelled by a: OrF ( or a: O R F ) cannot be expanded if B contains non-phantom nodes 
labelled by a: O^b (b: Oro) and b: F for some nominal b. 

A node (n) a: EF cannot be expanded in a branch B, if it already contains a non-phantom node 
labelled by b: F for some nominal b. 

R3. A phantom node cannot be expanded by means of a single-premiss rule (including the equality rule), 
nor can it be used as the minor premiss of a universal rule. 

R4. A blockable node n cannot be expanded if it is directly blocked in B. 

R5. A phantom node cannot be used as the minor premiss of any of the Trans rules. 

R6. A phantom node cannot be used as the logical premiss of any of the Link rules. 

Note that, as a particular case of restriction R3, the A rule cannot focus on a nominal which only 
occurs in phantom nodes in the branch. 

Finally, we only need to define the minor premiss of an application of the A rule. 

Definition 5. If B is obtained from B' by means of an application of the A rule focusing on the nominal 
b, then the minor premiss of such an application of the A rule is the first non-phantom node in B' where 
b occurs. 

Thanks to restriction R3, every application of the A rule has a minor premiss. 

We conclude with a simple example, showing the interplay between the Trans and Link rules. The 
notation n ^ K m or (ni, . . . , n^) m, used in the rightmost column, is used to mean that the addition 
of node m is due to the application of rule 1Z to node n (or nodes n\, . . . , n^). 

Example 1. Figure^ shows a closed one-branch tableau for the formula O5O5P A Og-ip, together with 
the assertions Trans(i?), R C S, S^R. Nodes 0~4 constitute the initial tableau. The branch is closed 
because of nodes 11 and 15. 



added to B. 



(0) 

(i) 

(2) 
(3) 
(1) 
(5) 
(6) 
(V) 



a:O s O s pA □g-'P 
Trans(_R) 



a- O s OsP 
a: □s-'P 



HQS 
SQR 
RQR 
SQS 



Relo 
Rel 




(8) 
(9) 
(10) 

(11) 

(12) 
(13) 
(14) 
(15) 



a: O s b 
b:O s p 
b: O s c 
c: p 



c: —ip 



a: R b 
b:0 R c 
b: R ^p 



6—° 8 
6->° 9 
9~>° 10 
9->° 11 
(8,3) ^ LM 
(10,3) ^ Lil 
(7, 12,1,2) 
(14, 13) -> [ 




D 15 



Figure 1: Example [T] 



1 The restriction named R.5 in [9] is subsumed by R.3, and what was called R6 is now included into R2. 
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4 A variant of the tableau calculus 



4.1 A compact description of the expansion rules 

The expansion rules of Table [3] are similar to those used to treat transitive roles and role hierarchies in 
description logics (see, for instance [131 E]), as well as the rules proposed in [TB] to treat the corresponding 
concepts in the language of hybrid logic. Such a similarity can be more easily recognized if the following 
notational conventions are adopted. 

Definition 6. Relation symbols will also be called positive relations and the inverse of relation symbols 
negative relations. A relation is either a positive or negative relation. Relations are denoted by boldface 
letters: R is a meta-symbol used to denote either R itself or its inverse R~ . Two relations have the same 
sign if they are either both positive or both negative; otherwise they have different signs. 

The notations on the left below are shorthand for the formulae or assertions on the right: 



a =^r b = 



a:0 R F = 



a: Ojib if R = 

6: O^a if R = 

a:0 R F ifR 

a: O r F if R 



R 

R- 

= R 
= R- 



a:D R F 



RCS 



a:U R F ifR = R, 

a:U~F ifR = R- 

RE= S if R and S have the same sign 

R~ CS if R and S have different signs 



Trans(R) = Trans(i?) in both cases H~R and R = R 

With these notations, the rules Reli-Re^ of Table Q] can be represented by a single "meta-rule": 

RCS SCP 
RCP 

The same can be said of the the □ and □ " rulesH 

(n)a:D R F (m) a b 
(k)b:F 

and the rules of Table [3] can be given a similar more compact presentation, as shown in Table [4] Note 
that, in the Link rule, R is a relation symbol (never a converse), and that R\ZS~ is a shorthand for 
R E S, therefore, if S = S~ , then R C S = R~ C S. The instance of the Trans rule where S and R are 
both positive is the Transi rule; if S and R are both negative, it is the Trans^f rule; the Trans2 and Trans^ 
rules are the cases where 8 = 5 and R = R~ , and S = S~ and R = R, respectively. 



(n)a:0 R b (i)ECS 



(Link) 



(m) a =*-s b 

(n)a:D s F (m) a => R 6 (t)Trans(R) (i)RCS 
(k)b:a R F 



JTrans) 



Table 4: A compact presentation of the rules of Table [3] 

This way of presenting the expansion rules highlights the closeness of the Trans rule to the corre- 
sponding rule used in description logics, where in fact "roles" include both role names (corresponding 



The O and O rules cannot be represented in an analogous way, because of the additional restriction in the O rule. 
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to relation symbols) and the inverse of role names, and inverse roles may also occur in role inclusion 
axioms H 

The abbreviation a =>r 6, however, does not have exactly the same meaning as the corresponding 
premiss used in the rule treating transitivity in description logics |131 114] (a similar approach is adopted 
in [H]), consisting of the meta- notion "6 is an R- neighbour of a"|f| In the setting of the present work, 
"b is an R-neighbour of a" would amount to saying that there exists a (positive or negative) relation S 
such that SCR and a =>s b. 

There are two main differences between the two approaches. First of all, the semantical notion of 
accessibility between two states is here given a "canonical representation" in the object language (a choice 
already made in [5J|H]): the fact that a state a is i?-related to b is represented by the relational formula 
a: 0/{&. Though scmantically equivalent to b: O^a, the latter is not a relational formula, i.e. it is not 
the canonical representation of an i?-rclation. This is reflected by the fact that the O rule cannot be 
applied to a relational formula, while b: O^a can be expanded by means of the O" rule. Moreover, in the 
present work, the notation a =>r b is only an abbreviation for a relational formula, which does not take 
subrelations into account: it may be the case that a =>s b for some SCR, and yet a =>r b does not hold. 

The fact that, in the present work, no meta- notion is used to represent "R- neighbours" is responsible 
for the presence of the Link rules, that have no counterpart in p~3l [Ml [T6] . 



4.2 Getting rid of the Link rules 

Actually, new relational nodes derivable by means of the Link rules are only needed when they can be 
premisses of either the □, d~ or the Trans rules. They can be dispensed with and implicitly embodied 
in such rules. The tableau expansion rules presented below are actually true reformulations of the 
corresponding rules in tableaux for description logics. The rules of Table [5] replace the □ and d~ rules 
of Table [5] and all the rules of Table [31 They are presented by use of the abbreviations introduced 
in Definition [6j and such abbreviations will be used from now on, even with an abuse of terminology, 
speaking of "the dj rule" to mean one of the four rules which might be called EI4, and "the Trans^ 

rule" stands for one of the eight ones Transi, . . . , Trans§. 



(n)a:D R G (m) a => s b (i)SCR 



(□0 



(k) b: G 

(n)a:D s F (m) a => P b (i')PCR (t)Trans(R) (i)RCS 
(k) b:a R F 



(Transi) 



Table 5: Variant of the expansion rules 

The dj rules are universal rules. The premiss n of either a dj or a Trans.; rule is its major premiss, 
the premiss m the minor premiss and the others are the side premisses of the inference. 

The offspring relation is defined like in Definition [21 but for the last item, which is obviously omitted. 
Being universal rules, the dj rules are taken into account by itcm[3J in the same item, the Trans rules 
have to be replaced by the TranSj rules. The same happens in Definition HJ R3 now affects also the dj 
rules, R5 concerns the Transi rules and R6 is omitted. 

Example 2. Figure^ shows a closed one-branch tableau obtained with the variant of the expansion rules 
for the same formula and assertions of Example QJ 

The next results establishes the straightforward relation existing between the calculus presented in 
Section [3] and its variant. 

3 The modal counterpart of such an approach would use modal operators of the form and O fl _ instead of rj^ and 

Or: 

The definition of i?-ncighbour (where R is a "role", i.e. either a role name or the converse of a role name) is the following: 
y is an R-neighbour of x if there exists a role SQR such that one of the following cases holds: (1) there is an arc from x 
to y labelled by S; (2) there is an arc from y to x labelled by the inverse of S. Semantically, y is an i?-neighbour of x if x 
is _R-related to y, whichever representation is given for this fact, but however taking into account the role hierarchy. 
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(0) o: OsOsP A a s -,p 

(1) Trans(K) 

(2) HQS 

(3) S C 

(4) _R C _R Rel 

(5) SCS Relo 

(6) a:O s O s p 0~> A 6 



(7) 


a: n s ^p 


0-> A 


7 


(8) 


a: O s b 


6^<> 


8 


(9) 


b: O s p 


6-° 


9 


(10) 


b:O s c 


9~»0 


10 


(11) 


c: p 


9—° 


11 



(12) b:0 R ^p (7,8,3, 1,2) -^ Trans > 12 

(13) c:^p (12, 10, 3)--> a ' 14 



Figure 2: Example [2] 



Lemma A. The rules of Table [5| are all derivable from the rules of Tables [H and [3J preserving the 
offspring relation. 

Proof. The Dj rule can be derived by means of the Link and □ (or rule, and the Trans^ rules by use 
of the suitable Link and the Trans rules, as shown in Figure [3l Furthermore, if the minor premiss m of 
the dj or TranSi rule is a phantom, then the Link rule cannot be applied cither. If m is not a phantom, 
the conclusion m! of the Link rule is a sibling of m, therefore it is not a phantom either, and the □ (□") 
or Trans rules can be applied. 

Finally, the conclusion k of both derivations above is a sibling of m, as required for the and Trans; 
rules. □ 



(m)a=> s 6 (i)SCR 



(n)o: n R G 



(m') a => R b 



(Link) 



(fc) 6: G 

(m)a=> P fe (i')PCR 



|ol-J) 



(n) a: D S F 



(m')a =^ R 6 



(Link) 



(t)Trans(R) (i)RCS 



(fc)6:D R F 



(Trans) 



Figure 3: Derivation of the rules of Table [5] from those of Tables [5] and [3] 



5 Termination and completeness with transitive relations and 
relation hierarchies 

Both calculi presented in this work are trivially sound. Moreover, each of them is complete and termi- 
nating, provided that the initial formula is in the fragment HL m (@, 4., E, 0~) \4-D. This section contains a 
succinct outline of the termination and completeness proofs. The whole proofs are quite long already for 
the calculus defined in [3] , so they are just summarized below and then the integrations and modifications 
needed to add assertions are shown. In order to make the presentation as readable as possible, however, 
statements and definitions are fully reported, when needed to understand the changes w.r.t. the proofs 
given in [S] . The numbering of lemmas will be the same as in [S] , so that the reader can easily find them 
for comparison, and new intermediate results and definitions are numbered autonomously. 

By Lemma [A~l if the calculus presented in Section [3] terminates, then also its variant does; and if the 
variant of Section H] is complete, then so is the calculus of Section [3J Section 15.11 is devoted to show 
termination of the first calculus, and Section 15.21 shows that the variant of the calculus is complete. In 
order to make proofs more compact, they will make use of the notations introduced in Section 031 when 
possible. 

In what follows, it is always assumed that the initial formula of the tableau is in the fragment 
HL m (@, 4., E, 0~) \ ID, even when it is not explicitly stated. 

The key result used to prove both termination and completeness is a form of subformula property. In 
the presence of subroles, the definition of the set of subformulae of a given formula F has to be widened, 
including among them all the formulae of the form O r G and n^G, for every subformula O s G or DgG 
of F and for every relation symbol R in the language. 

Definition Dl. If F is a formula, then G is a subformula of F if and only if either F = G or one of 
the following conditions holds: 
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• F = F\ -k F2, for -k G {A, V} and G is a subformula of F^; 

• either F — t: Fq or F = \x.Fq or F = V-Fb for V G {A, E, Or, O^}, and G is a subformula of Fq; 

• F = □h..Fo> f or some relation R, and G is a either a subformula of Fq or G = O s Fq for some 
relation S in the the language. 

If B is a tableau branch and a^: Fq its top formula, Subf(£>) is the set of the subformulae of Fq, and 

Cmp(B) = (Subf(S) n PROP) U {DrG | D r G G Subf(S)} 
The following result bounds the number of subformulae of a given formula. 

Lemma B. Let F be a formula in a language with M relation symbols, and \F\ = N the size of F. Then 
F has no more than 2 x M x N subformulae. 

Proof. The number of "standard subformulae" of F is bounded by N. Each of them, if it has either form 
□ ijG or 0~G, has 2 x M more subformulae (as defined in Definition ID1|) . Therefore, F has no more 
than 2 x M x N subformulae. □ 

With this modification, the main property of the calculus, stated by Lemma|3]in [5| still holds for both 
variants of the calculus. It uses the notion of instance of a formula F, that is any expression obtained by 
uniformly replacing every free variable of F with some nominal. 

Lemma 4 (Subformula properties) . For any formula a: F occurring in a branch B which is not a relational 
formula, F is an instance of a formula in Subf(B). 

Moreover, assuming that the initial formula of the branch is in the fragment HL\],D, if F is a universal 
formula, then F G Subf(£>). 

Proof. The proof is an induction on the construction of B, which simultaneously proves the following 
strongest versions of the two properties: if (n) a: F is a node in B and a: F is not a relational formula, 
then for any subformula F' of F: 

(a) F' is an instance of a formula in Subf(S), and 

(/?) if F' is a universal formula, then F' G Subf (B). 

The induction step of the corresponding proof in [5] can easily be extended with the cases where the 
branch B is obtained from B' by application of one of the new rules. We show below the treatment of all 
new rules of Tables [3] and [5] 

1. B is obtained by application of one of the Link rules. The newly added node is labelled by a 
relational formula, so a and /3 are vacuously true. 

2. If B is obtained by application of one of the Trans rules of Table [3] or the Trans^ rule of Table [3 
then a and f3 directly follow from the induction hypothesis. 

3. The Dj rules of Table [5] are treated exactly like the cases of the □ and rules in [9], the minor 
and side premisses being irrelevant. □ 

5.1 Termination 

Termination of the calculus presented in Section [3] is proved, like in [3], by showing that the nodes of 
a branch B are arranged by the offspring relation into a bounded sized set of trees, each of which has 
bounded width and bounded depth. Hence any tableau branch B has a number of nodes that is bounded 
by a function of the size of the initial formula. 

In order to show that, in the forest of trees induced by the offspring relation on the nodes of a branch 
B, any node has a bounded number of siblings, the key result is is Lemma [S] below. It uses the relation 
m t> n, holding between two nodes m and n whenever they are siblings w.r.t. the offspring relation and n 
has been added to the branch by application of an expansion rule to premisses including m. I.e. m > n 
if one of the following conditions hold: 

• n is added to the branch by application of some non-blockable single premiss rule to m; 
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• n is added to the branch by application of either a universal rule or a Trans rule whose minor 
premiss is m; 

• n is added to the branch by application of a Link rule whose logical premiss is m. 

The relation >* is the reflexive and transitive closure of t>. If n >* m, we say that n produces m. 

The proof of Lemma [5] uses the notions defined as follows. Let M be a set of nominals, F a formula 
(possibly containing free variables) and A a set of formulae. 

1. Clo(A) (the closure of A) is the set containing all the subformulae of every formula in A. 

2. An M- instance of F is a ground formula that can be obtained from F by replacing its free variables 
with elements of M. 

3. The set A M is the set containing all the M-instances of every element of A. 

Note that, though the above definitions are formally the same as in [S], the set denoted by Clo(A) is 
larger, because of the new notion of subformula. 

Lemma 5. Let n be a node in a branch B of a tableau for a formula F, and let A = \F\. Then the 
cardinality of = {m \ n O* m} is bounded by an exponential function E W (N). 

Proof. The thesis is proved by showing that the label of any node in £(n) has a matrix taken from 
a bounded stock of formulae, that is built in the language of the branch at the time n is added to it. 
Node labels with the same matrix are always equal, at any construction stage of the branch, so that the 
cardinality of S(n) is bounded by the number of such possible matrices, since siblings always have the 
same phantom/non-phantom status. 

Any branch B in a tableau is the last element of a sequence of branches, where the first one is the 
initial tableau, and each of the others is obtained from the previous one by application of an expansion 
rule. Such a sequence will be called the sequence of branches leading to B. 

Let n be any fixed node in a tableau branch B. The following notations will be used: 

1. B\ is the first branch where n occurs, in the sequence of branches leading to B. 

2. labe^ (fc) is the label of the node k in the branch Bj. This allows one to refer to node labels in 
different branches. 

3. For 1 < i < p, o~i is the composition of the substitutions applied in the sequence B\, ...,Bi, by 
means of the equality rule. Consequently, for each i > 0, labels (n) = cr^labclgj (n)). 

4. M n is the set containing all the nominals occurring in labelg 1 (n) and all the top nominals in B\. 

5. r„, A n and S n are the sets of formulae defined as follows: 

T„ = {F | F is a universal subformula of the top formula of B\} 
A„ = {label Bl (™)} ur„ 
S n = (Clo(A„)) M - 

i.e. S n contains all the M„-instances of every formula in the closure of A„. 

6. T n is the set defined as follows: 

T n = {a:F \ ae M n and F e 5„}U 

{a: O^fe | a, b £ M n and R is any relation symbol in the language} 

Any element of T n will be called a matrix (this definition is a straightforward extension to the 
multi- modal case of the corresponding definition in [5]). 

The bound E W (N) on the cardinality of computed in [9], is equal to \J- n \. Such a value, in 

turn, is shown to be equal to No + Nf x N N+1 , where No is the maximal number of relational formulae 
which can be built out of N nominals, and N\ is the maximal number of subformulae of a formula of 
size N. In the uni-modal case, Ao = N 2 and Ni = N, while in the multi-modal case Ao = A 3 and 
Ni = 2 x A 2 (by Lemma [Bj since the number of relation symbols in the language is also bounded by A). 
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The computation of the exponential factor is independent of the number of modalities in the language. 
Therefore, the bound E w (N) is exponential also in the multi- modal case. 

Let m be any node in £(77), i.e. n t>* m. An element F of T n is called a matrix of m in Bi if 
labelg i (m) = <7i(F); and F is a matrix of m if it is a matrix of m in all Bi where m occurs, for 
i = 1, . . . ,p. If two nodes mi and mi have the same matrix, then obviously for all i = 1, . . . ,p such that 
both mi and 777,2 are in Bi, labels (mi) = labelg^ (777,2). 

The proof that the cardinality of S(tt-) is bounded by E W (N), where E W (N) is the cardinality of F ni 
is based on the fact that every node in £(77) has a matrix: 

(a) the label of any node in £(77) has a matrix in J- n . I.e. if 777 G £(77), then there exists F G J-^ such 
that for alH > 1, if m G Bi then labels (m) = <Ji(F). 

The proof is by induction on i. We show next the cases of the induction step corresponding to the new 
rules of Table |1 

(Link) Let 77 >* k and m be obtained by an application of one of the Link rules to nodes k and t, with 

labels j _ 1 (fc) = label^ (k) = a: O^b 
labelg j _ 1 (m) = labels (m) = a =>s b. 

By the induction hypothesis, a:Ojib = ai(c:Ojid) for some c: O^d G J- n , i.e., a = Ui{c) and 
b = <Ji(d) for c, d G M„. Since c and d belong to M n , c =>s d G T n . Therefore c =>s d G J 7 ™ is a 
matrix of a =>s b G J-n in /S^, because a =>s & = Cj(c =>s rf)- 

(Trans) Let n>* k and m be obtained by an application of one of the Trans rule to nodes k, k', t and i, 
with 

labelg j _ 1 (A; / ) = labelg^fc') = a b, 
labelg j _ 1 (m) = labelg^m) = b: O r G. 

By Lemma HI O r G G S n . By the induction hypothesis, a =4>r b = Oiic =>r <i) for some c =>r c? G 
J 7 ,!, i.e. b = <7i(d) for some d G M„. Therefore d: DrG G J-"„ and, since b: O r G = CTi(d): DrG = 
<ji(d: DrG), d: DrG is a matrix of 777 in Bi. 

The fact that the cardinality of £(77) is bounded by E W (N), where E W (N) is the cardinality of T n 
is finally proved like in [9], obviously taking now into account also restrictions R5 and R6: Let us 
assume, by reductio ad absurdum, that £(77) has more than E W (N) elements. Then, by a, there are 
at least two distinct elements mi and 777-2 in S(n) which have the same matrix F. We may assume 
w.l.g. that 77 < mi < 7772. Let Bk be the first branch where 7772 occurs. Since 77 < 777,2, there is a 
node k G £(77) such that 77 t>* k t> 777,2. Given that k produces a node, it is not the major premiss 
of a universal rule or one of the Trans rules. Moreover, k is not a phantom in Bk-i, otherwise one 
of restrictions R3, R5 or R6 would be violated. Consequently, mi is not a phantom in Bk~i either. 
But labelg fc (m2) = <Jk(F) = <Tk-i{F) = labclB fc l (mi) (o-fc = Ok-\ because, clearly, Bk-i has not been 
expanded by means of the equality rule, which does not add new nodes to the branch). Therefore, the 
addition of 7772 to Bk-i violates restriction Rl. □ 

Lemma[5] allows for establishing that the number of trees in the forest induced by the offspring relation 
on the nodes of a tableau branch is bounded by an exponential function of the size of the initial formula, 
and so is the width of each of such trees. Obviously, now the trees include the single-node ones constituted 
by nodes labelled by assertions (assertions do not produce any node), but their number is polynomial in 
the length of the initial formula. 

In [5], it is then shown that tree depth is also bounded by an exponential function Ed(N) of N, 
where N is the size of the initial formula. The value of such a function is computed as Ni x E'JN), 
where N± is the maximal cardinality of the set of subformulac of the initial formula and E' d {N) is an 
exponential function of JV. In the mono-modal case, N\ — N, while in the multi-modal one, N\ = 2 x N 2 . 
Consequently, both tree width and tree depth increase only of a polynomial factor w.r.t. the uni-modal 
case. 

The rest of the termination proof is independent of the presence of the new expansion rules and 
multi- modalities, therefore, modulo the replacement of the exact values of E W (N) and Ed(N), it stays 
the same and the overall result does not change. 
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It is worth pointing out that the worst-case complexity of the calculus presented in this work has the 
same order of magnitude of the calculus in [5]: the nodes of a tableau branch are arranged by in a 
forest of trees, whose number is bounded by an exponential function of the size N of the input formula. 
Both tree width and tree depth are bounded by exponential functions of N, therefore the number of 
nodes in a single branch is bounded by a doubly exponential function. Since the cost of blockings is 
in the order of the branch size, the tableau calculus presented in this work shows that the satisfiability 
problem for HL m (@, |, E, O - , Trans, is in 2-NExpTime. It is reasonable to hypothesize that the 

problem complexity is actually lowerjj and consequently that, like many other tableau based algorithms, 
the decision procedure defined in this paper is not worst-case optimal. 

5.2 Completeness 

In order to prove that the calculus presented in Section 2] is complete, it is shown - like in [5] - how to 
extend a subset Afo of any complete and open branch B in such a way that every directly blocked node 
is added a suitable "witness". The witness(es) of a blockable node n can be viewed simply as node(s) 
which could by obtained by application of the corresponding blockable rule to The label of each 
newly added node is obtained from a node in Afo by suitably renaming non-top nominals. A model of 
the initial formula can then be extracted from such an extension. 

The construction of the extension of Afo is summarized below. The set Afo is the union of the non- 
phantom nodes in B and the nodes of the form (n) a: F, with a occurring in some non-phantom node in 
B and F G PROP or of the form D R G. 

The extended set Af^ is built by stages, as the union of a (possibly infinite) sequence of finite 

extensions of Afo' Afo Q Af\ C A/2 Each set Afi+i is obtained from Afi by choosing a "blocked" 

node n in Afi (with no witnesses). Its label is the renaming of the label of its blocking node m, which 
always belongs to Afo and is not blocked. Therefore m has been expanded in B, generating node(s) with 
a fresh nominal b. Let TTi be the mapping which maps m to n and bi a new nominal. Then a "nominal 
renaming" Oi is defined, extending TTi with b 1— } bi, and Afi+i extends Afi by addition of new nodes, each 
of which is obtained from a node k G Afo by application 0^ to its label. 

Possibly, new nodes with no witnesses are added, but each of them is blocked by a (non blocked) node 
in Afo- All the "blocked" nodes in Afi are stored in the blocking relation for Afi, B^, containing triples of 
the form (n,m, tt), where n is the blocked node (a blockable node without witnesses in Afi), m G Afo is 
not blocked, and tt a mapping such that 7r(label(m)) = label(n). 

Since the strategy to choose the nodes to "unblock" is fair, the set Afg is such that every blockable 
node has its witness (es). 

The construction enjoys the following properties, which can be proved like in [J ((2]is stated as Lemma 
10 in [9], and [3H5] constitute Lemma 11 in [9]): 

PI. For all i, the renaming 9i is an injective function, hence its inverse 0~ is defined. 

P2. If a nominal b occurs in Afo, then it occurs in some non-phantom node in B. 

P3. If i > and d is a nominal occurring in Afi-i, then no new node added at stage i has a label 
of the form d:p for p G PROP, or d: DrG. As a consequence, if two nominals occurring in 
Afi— 1 are compatible in A/"j_i, then, for any i > 0, they stay compatible in Afi (and in Af^). 

P4. If i > and 9i is the mapping used to extend Afi-i to Afi, then for every nominal d occurring 
in Afi, d and 9i(d) are compatible in Afi. 

P5. For every triple (n, m, tt) G B, (i.e. the node n G Afi is "blocked" by m G Afo by means of the 
mapping tt) and for every nominal d occurring in Afi, d and ir(d) are compatible in Afi- 

In order to build a model of Af^ , such a set is shown to enjoy a form of saturation property for non- 
phantom nodes: it is consistent (there are no labels of the form a: ->a, or both a:p and a: ~>p), it does not 
contain non-trivial equalities, and, for any node or pair of nodes in Afo that could be the premiss(es) of 
some expansion rule other than blockable ones, its expansion(s) are also in Afo- Such a notion is defined 

5 The satisfiability problem for HL(@,4-, E, O - ) \4-0 is in 2ExpTime [22], and the complexity of the concept satisfiability 
problem in description logics does not increase with the addition of transitive roles and role hierarchies. 
6 Actually, in [5], witnesses are nominals and not nodes, but this detail can be ignored here. 
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below. The definition is the same as in [9] , but for the reformulation of item [8] to the multi- modal case 
and the addition of the last items [TTKH] 

We abuse notation, writing Fi,F-2,--- £ Afi, meaning that there exist nodes in Afi labelled by 
Fi, F2 , ■ ■ . , respectively 

Definition 14. Let B be a complete and open branch and Afi an element of the sequence leading to 
the construction of Af^ . The set Afi is pseudo-saturated with respect to if it satisfies the following 
properties: 

1. no node in Afi is labelled by a formula of the form a: ->a; 

2. there are no pairs of nodes labelled by formulae of the form a:p and a: ->p, for p £ PROP; 

3. if any node in Afi is labelled by a formula of the form a: d ( where a and d are nominals ), then a — d; 

4. if a:F AG E Afi then, a: F £ Afi and a:G E TV, ; 

5. if a: F V G £ Afi, then either a:F £ Af t or a: G G Afi; 

6. if a:d:Fe Afi, then d: F £ Afa 

7. if a-.^x.F £ Afi, then a: F[a/x] G Afi; 

8. if a: Or^ 1 G Afi, F is not a nominal, and contains no triple of the form (n,n',7r) (i.e. n is not 
blocked in Bjj, then a =^r d, d: F £ Afi, for some nominal d (i.e. n has a witness in Afi); 

9. if a: EF G Afi and B^ contains no triple of the form (n, n' , 7r), then d: F G Afi for some nominal d 
(i.e. n has a witness in Afi); 

10. if a: AF £ Afi and d occurs in Afi, then d: F £ Afi; 

11. R^R£ Afi for any R £ REL. 

12. //RCS, S C P G Af u then RCP £ Afi- 

13. If a: a R F, a ^ s d, S C R £ Afi, then d: F £ Afi . 

U. ifa:D s F, a =>r b, PER, Trans(R), RCS £ Afi, then b: D R F £ Afi; 

Lemma 12. Let IB be a complete and open branch and Afi an element ofSjs- Then Afi is pseudo- saturated 
with respect to B^. 

Proof. First of all, we observe that clauses [TT] and [T^] hold because, since B is complete, all rules of 
Table Q] have been applied as far as possible when building the initial tableau. They generate top (hence 
non-phantom) nodes, which belong to Nq C Afi for all i. 

For the other clauses, the proof is by induction on i. Both the base case and the induction step of the 
corresponding proof in [9] (possibly reformulated for the multi-modal case) must be completed with the 
new cases: [13] and [14] Their treatment is actually very similar to the cases dealing with the □ and 
rules in [3] , in both the base case and the induction step. 

16. Base. If (m) a =>s d £ Afo, then m is not a phantom in B. If also a: O r F, S C R £ Afa C B and 
AAo did not contain d: F, then any node labelled by d: F in B (if present) would be a phantom. 
Therefore, in order for B to be complete, the rule should be applied, generating a node 
(k) d: F £ B. Since m and k would be siblings w.r.t. the offspring relation, k would not be a 
phantom in B, therefore k £ Afo . 

Induction Step. Let us assume that a:d R F, a =>s d, SCR G Afi- By Lemma 0] F does not 
contain any non-top nominal, hence 9i(F) = F for any i. 
We distinguish two cases: 

(a) a: DrF ^ Afi-i- By Property FO then, a = b % is the new nominal introduced at stage i. 
Therefore, 7V contains nodes labelled by 9~(b l : D R F) = 0~ (b l ): D R F and 6»,r(6 l =^ s d = 
0~{b % ) =>s S~{d). Since TVo contains also SCR and is pseudo-saturated, 0~(d): F £ Afo, 
so that 0i (07(d)): F = d: F £ Af t . 
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(b) a: a R F G Afi-i- If also a => s d G Afi-i, then d: F G A/;_i C TV, by the induction 
hypothesis. Otherwise, 07 (a) =^s @i(d) G AT . Let a' = 07(a) and d' = 07(d). By 
Property FQJ a and a' are compatible in Af%, therefore a': O r F G Moreover, since a' 
occurs in Af Q , by Property PS a': D R F G Af . Since also a' d', S C R G Afo and 7V 
is pseudo-saturated, d 1 : F G A/"o, so that also 9i(d'): F = d: F G A/**. 

17. .Base. If (to) a =>p b G Wo, then is not a phantom in B. If also a: Ds-F, PCR, Trans(R), 
R C 5 G A/"o, then the Trans^ rule has been applied, generating (k) b: □r.-F; fc is a sibling of m, 
hence non-phantom too, and belongs to A/"o- 

Induction Step. Let us assume that P C R, Trans(R), R □ S G ATq, that (n) a:O s F, (to) a =>p 
d G A/"j and at least one of n and to does not belong to A/"i-i (otherwise the thesis follows 
from induction hypothesis). By Lemma 01 -F does not contain any non-top nominal, hence 
6i(F) = F for any i. 
We distinguish two cases: 



(a) a: O s F g" A/*i_i. By Property F(31 then, a = b % is the new nominal introduced at stage 
i. Therefore, Af contains nodes labelled by 07(fe 4 : n s F) = 07(6*): D S .F and 07(6* =^ P 
d) = 07 (o l ) => P 01(d). Since A/"o is pseudo-saturated, 07(d): Dr. i* 1 G A/"o, so that 

e^e-i^y.n^F = d-.D R F eM t . 

(b) a:D s F G A/"i_i- If a => P d £ Afi-i, then 07(a) ^ P 07(d) G Wo- Let a' = 07(a) 
and d' = 0.7(d). By Property P31 a and a' are compatible in ATi, therefore a': O s F G A/";. 
Moreover, since a' occurs in A/"o, by Property F|3l a': O s F G A/"o- Since also a' => P a" G A/"o 
and A^o is pseudo-saturated, d': DrF G A/q, so that also di(d'): O r F = d: DrF G A/V □ 



The construction of a model of Afj£ is here substantially different from the corresponding one in [5] , 
and is inspired by |13j . In order to simplify the presentation, an intermediate result is stated and proved 
next, based on the following definition. 

Definition D2. Let B be a complete and open branch. For every relation symbol R occurring in B, 
the following notions are defined (in the first two items the branch B is left implicit so as to lighten the 
notation): 

1. Rc = {(a,b) | a =^ s b G Afj£ for some S □ i? g B}, and R^ = {(a,b) \ (b,a) G Rc}- 
Moreover, Rc is an abbreviation for Rc if R is a positive relation, otherwise it stands for i? _ . 

2. (Rc) + is the transitive closure o/Rc- 

3. ps is the function on relation symbols defined as follows: 



Pb(R ) stands for {(a, 6) | (6, a) G pb(R)}- 

Below, we shall moreover use the notation Inv(R) to denote R~ if R = R is a positive relation; 
otherwise, if R = R~ , then Inv(R) = R. 

Lemma C. If B is a complete and open branch, then: 

1. for every R such that Trans(i?) G B, Pb(R) is a transitive relation; 

2. for every S QR G B, Sc Q R c ; 

3. for every relation symbol R and nominals a,b, if Trans(i?) G B, then (a,b) G Pb(R) if an d only 
if there are nominals cq = a, ci, . . . , c„, c rl +i = b and relations Po, ■ • ■ , P n , for n > 0, such that 
Pj C R g B and Ci => Pi q+i G Af^ , for all i = . . . n. 

4- for every S C R G B, ps(S) C pb(R). 

5. For every relation R and nominals a, b, if (a, b) G /?g(R) then one of the following cases holds: 




(i?c) + if Trans(i?) G B 

Rc U {(Sc)+ S C R e B and Trans(S) G B} 



otherwise 
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• a => s b G Wg° /or some S C R e 23 ; 

• there exist relations P,Po,...,P„ and nominate c$ — a, . . . , c n +i = b (n > 0), such that 
Trans(P), PCReB and, for all i = . . .n, P.CPgB and c, c i+1 G Wg°. 

Proof. The first item follows directly from the definition of pg. 

2. Let us assume that S C i? e 23 and (a, 6) 6 Sc. Then a =^ P b G A/"g° for some PCSeB. Since 
PCS and SCi? are both in 23 and 23 is complete, also P C i? is in B. Therefore (a, b) G i?c- 

3. Let us assume that that there are nominals cq = a, Ci, . . . , c„, c n +i = o and relations Po, . . . , P n 
such that P^Ci? G B and Cj => Pi c i+ i G jVg\ for all i = 0...n. Then, (a,Ci+i) G i?c, by 
definition. If moreover Trans(i?) G B, then pb(R) = (Rc) + , therefore (a, b) G pis(R). 

For the other direction, let us assume that Trans(i?) G B and (a, b) G Pb{R) = (Rc) + - Then there 
are nominals Co = a, c\, . . . , c„, c n +i = 6, for rt > 0, such that (cj, Q+i) G i?c for all i = . . . n. For 
each such i, Cj => Pi Cj+i G ./V^? for some P; C i?. 

4. Let us assume that S C i? G 23. We distinguish the following cases: 

(a) Both Trans(S) and Trans(i?) are in B. Then jOg(S) C ps(R) follows from item [5] and the 
definition of pg. 

(b) If Trans(i?) g" B and Trans(S) G 6, then pg(S) C ps{R) follows directly from the definition of 
Pb- 

(c) Let us finally consider the case where Trans(S) ^ B and Trans(i?) G B, and let us assume that 
(a,b) ep B (S). 

If (a, 6) G Sc, then (a, 6) G J?c C by itemU 

If (a, 6) Sc, then (a, 6) G ps(P) for some P such that PCS, Trans(P) G B. 
By item [3J there are nominals cq = a, . . . , c„, c„+i = 6 and relations Po, • ■ • , P n such that 
Pi E P G 23 and A/*g contains Cj =^ Pi c m for all i = . . . n. Since P,CP, PCS and S C i? 
are all in 23, the branch also contains P^ C R for all i = . . . n. Therefore, (cj, Cj+i) G Re for 
all i = . . .n and (a, 6) G (i?c) + = Pb(R)- 

5. In order to make the distinction between positive and negative relations clearer, we distinguish the 
two cases. 

(a) R is a positive relation. If Trans(i?) G B, then the second case holds, following from item [31 
taking P = Pj = R for alii = 0, . . . , n (since B is complete, it contains R C R). 

Let us assume that Trans(i?) ^ 23 and (a, 6) G pb{R)- If (a, 6) G i?c then the first case holds 
because Rc Q Pb{R)- If (a, o) ^ i?c, then (a, 6) G Pb(P) for some P such that P C i? G 23 and 
Trans(P) G 23. Therefore the second case holds, following from item[3j 

(b) If R = R~, then (a, b) G pe(R) if and only if (b,a) G pb(R). From the above case it follows 
that one of the following cases holds: 

• 6 =^ s a G Afg for some S C i? G 23. Since S C i? = Inv(S) C and 6 =^ s a = a =hnv(S) 
the first case holds. 

• there exist relations P, Po, ■ • ■ , P n and nominals cq = a, . . . , c n +i = 6, such that P C i?, 
Trans(P) G 23 and, for all i = . . . n, P, ; C P G 23 and c i+ i => Pj q G A/"g. Then the 
second case holds because PCi? = lnv(P)Ci?~, Trans(P) = Trans(lnv(P)), P; CP = 
Inv(Pi) C Inv(P) and c i+ \ =^ Pl c t = c t =h nv ( Pi ) Ci+i- □ 

Lemma 13. 7/23 is a complete and open branch, then the possibly infinite set Af^ has a model. 
Proof. Let M = (W, p, N, I) be defined as follows: 

• W is the set of all the nominals occurring in A/"g° ; 

• P = PB- 

• N(a) = a for every nominal a; 
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• for any p G PROP, p G 1(a) if and only if a:p is the label of some node in ATg 3 ; 

The fact that A4 is a model of the set of assertions in B follows from Lemma [Cl 

Next we prove that, for every a: F £ A/"g°, A4 a \= F. The proof is by induction on F. All cases are 

straightforward consequences of the definition of M. , Lemma [T^] and the fact that every blockable node 

has its witness(es) in Afg', except for the case where F — DrG, whose treatment is shown below. 

We shall use the notation F\,...,F n F to mean that from the fact that F\, . . . ,F n G A/g° it 

can be inferred that F G A/"g°, because, by Lemma [T2l Af^ satisfies item k of Definition Q3] (corresponding 

to the expansion rule 1Z). 

(□r) Let us assume that a: DrG G Af^ . It must be shown that A4b \= G for every b such that 



(a, b) G p B (R). 

By item[5]of Lemma [Cl if (a, 6} G p(R), then one of the cases that follows holds. For each of them 
we show that b:G G Af°°; therefore, by the induction hypothesis AAb \= G. 

1. a =^ s b G Afg for some S C R G S. Then 6: G G A/" 00 because: 

a:D R G, a=> s b, SCR =-Hl n .) 6: G 

2. there exist relations P,Po,...,P„ and nominals cq = a, . . . ,c n +\ = b (n > 0), such that 
Trans(P), PCReS and, for alH = . . . n, P, C P G S and a =^ Pi c m G A/"g. Then: 



Completeness can finally be proved using Lemma [T3] like in [5] . 

6 Concluding remarks 

This work presents a satisfiability decision procedure for hybrid formulae in HL m (@,|, E, 0~ , Trans, C ) \ 
□4-D. Transitivity and relation inclusion assertions are treated by expansion rules which are essentially 
reformulations of the analogous rules presented in [131 [Ml IT5l H6] . The main result of this work is proving 
that they can be added to a calculus dealing also with (restricted occurrences of) the binder, maintaining 
termination, beyond soundness and completeness. 

It is worth pointing out that, like in [7J 111 QUI IH], the calculus presented in this work treats nominal 
equalities by means of substitution, and this is essential to ensure a key property of the calculus, used 
to prove both termination and completeness: any universal formula occurring in a tableau branch is a 
subformula of the top formula, therefore a branch cannot contain an unbounded number of universal 
formulae. 

Other works have addressed the issue of representing frame properties and/or relation hierarchies in 
tableau calculi for binder-free hybrid logic (for instance, [H [TSJ Q2] ) . The maybe richer calculus of this 
kind is Q2], that considers graded and global modalities, reflexivity, transitivity and role hierarchies. The 
converse modalities are however missing, and inverse relations are not allowed. 

The possibility of adding graded modalities to the calculus presented in this work is an interesting 
but hard issue. As a matter of fact, whether restricted occurrences of the binder can coexist with graded 
modalities in a decidable hybrid logic is an open question. 
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